AppSec Engineer — Build Secure SDLC & Automations

Teradata Corporation (SE); Honolulu (HI); On-site; USD 102,000 - 153,000; Full time

Benefits offered by this job

Health care

Life Insurance

Disability Insurance

401(k) and retirement savings

Paid time off

Job summary

Teradata Corporation (SE) seeks an experienced Application Security Engineer to integrate and support security across the software development lifecycle. You will triage findings, provide actionable remediation guidance, and conduct code reviews across multiple languages while embedding security in CI/CD pipelines.

You will assess web apps, APIs, and AI-enabled workflows against OWASP standards and mentor engineers on secure practices, with a focus on risk reduction in Teradata's software

Qualifications

• Knowledge of core application security principles and mitigations.
• Experience with secure SDLC practices and tooling.
• Ability to translate security findings for non-security audiences.

Responsibilities

• Analyze findings from SAST, SCA, DAST, IaC, and container scans and triage true positives.
• Deliver remediation guidance to development teams for AppSec findings across portfolios.
• Perform code reviews across Java, C/C++, Go, Python, and JavaScript/TypeScript.
• Integrate AppSec scanning tools into CI/CD pipelines.
• Assess web apps and APIs for OWASP Top Ten (2025) vulnerabilities.
• Apply OWASP ASVS, AISVS, and SVPS in assessments and requirements.
• Review AI-assisted workflows for risks like prompt injection and over-privilege.

Skills

AppSec fundamentals

Security in SDLC

Code review practices

CI/CD security integration

Threat modeling

OWASP standards

Security automation

Education

MS/BS in Electrical Engineering, Computer Science, Information Technology

Tools

Go

Terraform

CloudFormation

Helm

Ansible

Job description

Teradata Corporation (SE) seeks an experienced Application Security Engineer to integrate and support security across the software development lifecycle. You will triage findings, provide actionable remediation guidance, and conduct code reviews across multiple languages while embedding security in CI/CD pipelines.

You will assess web apps, APIs, and AI-enabled workflows against OWASP standards and mentor engineers on secure practices, with a focus on risk reduction in Teradata's software